@String(PAMI = {IEEE Trans. Pattern Anal. Mach. Intell.})
@String(IJCV = {Int. J. Comput. Vis.})
@String(CVPR= {IEEE Conf. Comput. Vis. Pattern Recog.})
@String(ICCV= {Int. Conf. Comput. Vis.})
@String(ECCV= {Eur. Conf. Comput. Vis.})
@String(NIPS= {Adv. Neural Inform. Process. Syst.})
@String(ICPR = {Int. Conf. Pattern Recog.})
@String(BMVC= {Brit. Mach. Vis. Conf.})
@String(TOG= {ACM Trans. Graph.})
@String(TIP  = {IEEE Trans. Image Process.})
@String(TVCG  = {IEEE Trans. Vis. Comput. Graph.})
@String(TMM  = {IEEE Trans. Multimedia})
@String(ACMMM= {ACM Int. Conf. Multimedia})
@String(ICME = {Int. Conf. Multimedia and Expo})
@String(ICASSP=	{ICASSP})
@String(ICIP = {IEEE Int. Conf. Image Process.})
@String(ACCV  = {ACCV})
@String(ICLR = {Int. Conf. Learn. Represent.})
@String(IJCAI = {IJCAI})
@String(PR   = {Pattern Recognition})
@String(AAAI = {AAAI})
@String(CVPRW= {IEEE Conf. Comput. Vis. Pattern Recog. Worksh.})
@String(CSVT = {IEEE Trans. Circuit Syst. Video Technol.})

@String(SPL	= {IEEE Sign. Process. Letters})
@String(VR   = {Vis. Res.})
@String(JOV	 = {J. Vis.})
@String(TVC  = {The Vis. Comput.})
@String(JCST  = {J. Comput. Sci. Tech.})
@String(CGF  = {Comput. Graph. Forum})
@String(CVM = {Computational Visual Media})


@String(PAMI  = {IEEE TPAMI})
@String(IJCV  = {IJCV})
@String(CVPR  = {CVPR})
@String(ICCV  = {ICCV})
@String(ECCV  = {ECCV})
@String(NIPS  = {NeurIPS})
@String(ICPR  = {ICPR})
@String(BMVC  =	{BMVC})
@String(TOG   = {ACM TOG})
@String(TIP   = {IEEE TIP})
@String(TVCG  = {IEEE TVCG})
@String(TCSVT = {IEEE TCSVT})
@String(TMM   =	{IEEE TMM})
@String(ACMMM = {ACM MM})
@String(ICME  =	{ICME})
@String(ICASSP=	{ICASSP})
@String(ICIP  = {ICIP})
@String(ACCV  = {ACCV})
@String(ICLR  = {ICLR})
@String(IJCAI = {IJCAI})
@String(PR = {PR})
@String(AAAI = {AAAI})
@String(CVPRW= {CVPRW})
@String(CSVT = {IEEE TCSVT})


@inproceedings{mcmahan2017communication,
  title={Communication-efficient learning of deep networks from decentralized data},
  author={McMahan, Brendan and Moore, Eider and Ramage, Daniel and Hampson, Seth and y Arcas, Blaise Aguera},
  booktitle={Artificial intelligence and statistics},
  pages={1273--1282},
  year={2017},
  organization={PMLR}
}

@inproceedings{tan2022fedproto,
  title={Fedproto: Federated prototype learning across heterogeneous clients},
  author={Tan, Yue and Long, Guodong and Liu, Lu and Zhou, Tianyi and Lu, Qinghua and Jiang, Jing and Zhang, Chengqi},
  booktitle={Proceedings of the AAAI Conference on Artificial Intelligence},
  volume={36},
  number={8},
  pages={8432--8440},
  year={2022}
}  

@article{zizzo2020fat,
  title={Fat: Federated adversarial training},
  author={Zizzo, Giulio and Rawat, Ambrish and Sinn, Mathieu and Buesser, Beat},
  journal={arXiv preprint arXiv:2012.01791},
  year={2020}
} 

@article{lyu2022privacy,
  title={Privacy and robustness in federated learning: Attacks and defenses},
  author={Lyu, Lingjuan and Yu, Han and Ma, Xingjun and Chen, Chen and Sun, Lichao and Zhao, Jun and Yang, Qiang and Philip, S Yu},
  journal={IEEE transactions on neural networks and learning systems},
  year={2022},
  publisher={IEEE}
}

@article{zhou2020adversarially,
  title={Adversarially robust federated learning for neural networks},
  author={Zhou, Yao and Wu, Jun and He, Jingrui},
  year={2020}
}

@article{yang2019federated,
  title={Federated machine learning: Concept and applications},
  author={Yang, Qiang and Liu, Yang and Chen, Tianjian and Tong, Yongxin},
  journal={ACM Transactions on Intelligent Systems and Technology (TIST)},
  volume={10},
  number={2},
  pages={1--19},
  year={2019},
  publisher={ACM New York, NY, USA}
}  

@article{madry2017towards,
  title={Towards deep learning models resistant to adversarial attacks},
  author={Madry, Aleksander and Makelov, Aleksandar and Schmidt, Ludwig and Tsipras, Dimitris and Vladu, Adrian},
  journal={arXiv preprint arXiv:1706.06083},
  year={2017}
}

@article{kairouz2021advances,
  title={Advances and open problems in federated learning},
  author={Kairouz, Peter and McMahan, H Brendan and Avent, Brendan and Bellet, Aur{\'e}lien and Bennis, Mehdi and Bhagoji, Arjun Nitin and Bonawitz, Kallista and Charles, Zachary and Cormode, Graham and Cummings, Rachel and others},
  journal={Foundations and Trends{\textregistered} in Machine Learning},
  volume={14},
  number={1--2},
  pages={1--210},
  year={2021},
  publisher={Now Publishers, Inc.}
}

@article{hong2021federated,
  title={Federated robustness propagation: Sharing adversarial robustness in federated learning},
  author={Hong, Junyuan and Wang, Haotao and Wang, Zhangyang and Zhou, Jiayu},
  year={2021}
}

@inproceedings{chen2022gear,
  title={Gear: a margin-based federated adversarial training approach},
  author={Chen, Chen and Zhang, Jie and Lyu, Lingjuan},
  booktitle={International Workshop on Trustable, Verifiable, and Auditable Federated Learning in Conjunction with AAAI},
  volume={2022},
  year={2022}
}  

@article{zhu2023combating,
  title={Combating Exacerbated Heterogeneity for Robust Models in Federated Learning},
  author={Zhu, Jianing and Yao, Jiangchao and Liu, Tongliang and Yao, Quanming and Xu, Jianliang and Han, Bo},
  journal={arXiv preprint arXiv:2303.00250},
  year={2023}
}  

@article{zhang2023delving,
  title={Delving into the adversarial robustness of federated learning},
  author={Zhang, Jie and Li, Bo and Chen, Chen and Lyu, Lingjuan and Wu, Shuang and Ding, Shouhong and Wu, Chao},
  journal={arXiv preprint arXiv:2302.09479},
  year={2023}
}  

@article{chen2022calfat,
  title={Calfat: Calibrated federated adversarial training with label skewness},
  author={Chen, Chen and Liu, Yuchen and Ma, Xingjun and Lyu, Lingjuan},
  journal={Advances in Neural Information Processing Systems},
  volume={35},
  pages={3569--3581},
  year={2022}
}

@article{goodfellow2014explaining,
  title={Explaining and harnessing adversarial examples},
  author={Goodfellow, Ian J and Shlens, Jonathon and Szegedy, Christian},
  journal={arXiv preprint arXiv:1412.6572},
  year={2014}
}

@article{shafahi2018adversarial,
  title={Are adversarial examples inevitable?},
  author={Shafahi, Ali and Huang, W Ronny and Studer, Christoph and Feizi, Soheil and Goldstein, Tom},
  journal={arXiv preprint arXiv:1809.02104},
  year={2018}
}

@inproceedings{kim2023demystifying,
  title={Demystifying Causal Features on Adversarial Examples and Causal Inoculation for Robust Network by Adversarial Instrumental Variable Regression},
  author={Kim, Junho and Lee, Byung-Kwan and Ro, Yong Man},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={12302--12312},
  year={2023}
}

@inproceedings{liang2021fedrec++,
  title={Fedrec++: Lossless federated recommendation with explicit feedback},
  author={Liang, Feng and Pan, Weike and Ming, Zhong},
  booktitle={Proceedings of the AAAI conference on artificial intelligence},
  volume={35},
  number={5},
  pages={4224--4231},
  year={2021}
}

@inproceedings{liu2021feddg,
  title={Feddg: Federated domain generalization on medical image segmentation via episodic learning in continuous frequency space},
  author={Liu, Quande and Chen, Cheng and Qin, Jing and Dou, Qi and Heng, Pheng-Ann},
  booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
  pages={1013--1023},
  year={2021}
}

@inproceedings{liu2021fedct,
  title={FedCT: Federated collaborative transfer for recommendation},
  author={Liu, Shuchang and Xu, Shuyuan and Yu, Wenhui and Fu, Zuohui and Zhang, Yongfeng and Marian, Amelie},
  booktitle={Proceedings of the 44th international ACM SIGIR conference on research and development in information retrieval},
  pages={716--725},
  year={2021}
} 

@article{shah2021adversarial,
  title={Adversarial training in communication constrained federated learning},
  author={Shah, Devansh and Dube, Parijat and Chakraborty, Supriyo and Verma, Ashish},
  journal={arXiv preprint arXiv:2103.01319},
  year={2021}
}

@phdthesis{reiersol1945confluence,
  title={Confluence analysis by means of instrumental sets of variables},
  author={Reiers{\o}l, Olav},
  year={1945},
  school={Almqvist \& Wiksell}
}

@article{bennett2019deep,
  title={Deep generalized method of moments for instrumental variable analysis},
  author={Bennett, Andrew and Kallus, Nathan and Schnabel, Tobias},
  journal={Advances in neural information processing systems},
  volume={32},
  year={2019}
}

@article{dikkala2020minimax,
  title={Minimax estimation of conditional moment models},
  author={Dikkala, Nishanth and Lewis, Greg and Mackey, Lester and Syrgkanis, Vasilis},
  journal={Advances in Neural Information Processing Systems},
  volume={33},
  pages={12248--12262},
  year={2020}
}

@misc{card1993using,
  title={Using geographic variation in college proximity to estimate the return to schooling},
  author={Card, David},
  year={1993},
  publisher={National Bureau of Economic Research Cambridge, Mass., USA}
}

@article{angrist2001instrumental,
  title={Instrumental variables and the search for identification: From supply and demand to natural experiments},
  author={Angrist, Joshua D and Krueger, Alan B},
  journal={Journal of Economic perspectives},
  volume={15},
  number={4},
  pages={69--85},
  year={2001},
  publisher={American Economic Association}
} 

@article{lewis2018adversarial,
  title={Adversarial generalized method of moments},
  author={Lewis, Greg and Syrgkanis, Vasilis},
  journal={arXiv preprint arXiv:1803.07164},
  year={2018}
}

@article{hansen1982large,
  title={Large sample properties of generalized method of moments estimators},
  author={Hansen, Lars Peter},
  journal={Econometrica: Journal of the econometric society},
  pages={1029--1054},
  year={1982},
  publisher={JSTOR}
}

@inproceedings{hsieh2020non,
  title={The non-iid data quagmire of decentralized machine learning},
  author={Hsieh, Kevin and Phanishayee, Amar and Mutlu, Onur and Gibbons, Phillip},
  booktitle={International Conference on Machine Learning},
  pages={4387--4398},
  year={2020},
  organization={PMLR}
}

@article{luo2019real,
  title={Real-world image datasets for federated learning},
  author={Luo, Jiahuan and Wu, Xueyang and Luo, Yun and Huang, Anbu and Huang, Yunfeng and Liu, Yang and Yang, Qiang},
  journal={arXiv preprint arXiv:1910.11089},
  year={2019}
}

@inproceedings{zhang2019theoretically,
  title={Theoretically principled trade-off between robustness and accuracy},
  author={Zhang, Hongyang and Yu, Yaodong and Jiao, Jiantao and Xing, Eric and El Ghaoui, Laurent and Jordan, Michael},
  booktitle={International conference on machine learning},
  pages={7472--7482},
  year={2019},
  organization={PMLR}
}

@inproceedings{heo2019knowledge,
  title={Knowledge distillation with adversarial samples supporting decision boundary},
  author={Heo, Byeongho and Lee, Minsik and Yun, Sangdoo and Choi, Jin Young},
  booktitle={Proceedings of the AAAI conference on artificial intelligence},
  volume={33},
  number={01},
  pages={3771--3778},
  year={2019}
}

@article{krizhevsky2009learning,
  title={Learning multiple layers of features from tiny images},
  author={Krizhevsky, Alex and Hinton, Geoffrey and others},
  year={2009},
  publisher={Toronto, ON, Canada}
}

@article{netzer2011reading,
  title={Reading digits in natural images with unsupervised feature learning},
  author={Netzer, Yuval and Wang, Tao and Coates, Adam and Bissacco, Alessandro and Wu, Bo and Ng, Andrew Y},
  year={2011}
}

@article{le2015tiny,
  title={Tiny imagenet visual recognition challenge},
  author={Le, Ya and Yang, Xuan},
  journal={CS 231N},
  volume={7},
  number={7},
  pages={3},
  year={2015}
}

@article{Simonyan_Zisserman_2015,  
title={Very Deep Convolutional Networks for Large-Scale Image Recognition}, 
journal={International Conference on Learning Representations,International Conference on Learning Representations}, 
author={Simonyan, Karen and Zisserman, Andrew}, 
year={2015}, 
month={Jan}, 
language={en-US} 
}

@inproceedings{He_Zhang_Ren_Sun_2016,  
title={Deep Residual Learning for Image Recognition}, 
url={http://dx.doi.org/10.1109/cvpr.2016.90}, 
DOI={10.1109/cvpr.2016.90}, 
booktitle={2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR)}, 
author={He, Kaiming and Zhang, Xiangyu and Ren, Shaoqing and Sun, Jian}, 
year={2016}, 
month={Jun}, 
language={en-US} 
}

@inproceedings{Zagoruyko_Komodakis_2016,  
title={Wide Residual Networks}, 
url={http://dx.doi.org/10.5244/c.30.87}, 
DOI={10.5244/c.30.87}, 
booktitle={Procedings of the British Machine Vision Conference 2016}, 
author={Zagoruyko, Sergey and Komodakis, Nikos}, 
year={2016}, 
month={Jan}, 
language={en-US} 
}

@inproceedings{Carlini_Wagner_2017,  
title={Towards Evaluating the Robustness of Neural Networks}, 
url={http://dx.doi.org/10.1109/sp.2017.49}, 
DOI={10.1109/sp.2017.49}, 
booktitle={2017 IEEE Symposium on Security and Privacy (SP)}, 
author={Carlini, Nicholas and Wagner, David}, 
year={2017}, 
month={May}, 
language={en-US} 
}
@article{Robbins_Monro,  
title={A Stochastic Approximation Method}, 
url={http://dx.doi.org/10.1214/aoms/1177729586}, 
DOI={10.1214/aoms/1177729586}, 
journal={The Annals of Mathematical Statistics}, 
author={Robbins, Herbert and Monro, Sutton}, 
pages={400–407}, 
language={en-US} 
}

@inproceedings{Smith_2017,  
title={Cyclical Learning Rates for Training Neural Networks}, 
url={http://dx.doi.org/10.1109/wacv.2017.58}, 
DOI={10.1109/wacv.2017.58}, 
booktitle={2017 IEEE Winter Conference on Applications of Computer Vision (WACV)}, 
author={Smith, Leslie N.}, 
year={2017}, 
month={Mar}, 
language={en-US} 
}

@article{runde1998assessing,
  title={Assessing causal economic explanations},
  author={Runde, Jochen},
  journal={Oxford Economic Papers},
  volume={50},
  number={2},
  pages={151--172},
  year={1998},
  publisher={Oxford University Press}
} 

@article{bloom2001cumulative,
  title={Cumulative causality, economic growth, and the demographic transition},
  author={Bloom, David E and Canning, David},
  journal={Population matters: Demographic change, economic growth, and poverty in the developing world},
  pages={165--197},
  year={2001},
  publisher={New York: Oxford University Press}
} 

@article{sebri2014causal,
  title={On the causal dynamics between economic growth, renewable energy consumption, CO2 emissions and trade openness: Fresh evidence from BRICS countries},
  author={Sebri, Maamar and Ben-Salha, Ousama},
  journal={Renewable and Sustainable Energy Reviews},
  volume={39},
  pages={14--23},
  year={2014},
  publisher={Elsevier}
}

@article{zhao2018federated,
  title={Federated learning with non-iid data},
  author={Zhao, Yue and Li, Meng and Lai, Liangzhen and Suda, Naveen and Civin, Damon and Chandra, Vikas},
  journal={arXiv preprint arXiv:1806.00582},
  year={2018}
}

@article{omri2015modeling,
  title={Modeling the causal linkages between nuclear energy, renewable energy and economic growth in developed and developing countries},
  author={Omri, Anis and Mabrouk, Nejah Ben and Sassi-Tmar, Amel},
  journal={Renewable and Sustainable Energy Reviews},
  volume={42},
  pages={1012--1022},
  year={2015},
  publisher={Elsevier}
}

@article{lattimore2019causal,
  title={Causal inference with Bayes rule},
  author={Lattimore, Finnian and Rohde, David},
  journal={arXiv preprint arXiv:1910.01510},
  year={2019}
}  

@article{glymour2003learning,
  title={Learning, prediction and causal Bayes nets},
  author={Glymour, Clark},
  journal={Trends in cognitive sciences},
  volume={7},
  number={1},
  pages={43--48},
  year={2003},
  publisher={Elsevier}
}

@article{gopnik2004theory,
  title={A theory of causal learning in children: causal maps and Bayes nets.},
  author={Gopnik, Alison and Glymour, Clark and Sobel, David M and Schulz, Laura E and Kushnir, Tamar and Danks, David},
  journal={Psychological review},
  volume={111},
  number={1},
  pages={3},
  year={2004},
  publisher={American Psychological Association}
}

@article{pearl2000models,
  title={Models, reasoning and inference},
  author={Pearl, Judea and others},
  journal={Cambridge, UK: CambridgeUniversityPress},
  volume={19},
  number={2},
  pages={3},
  year={2000}
}

@article{li2021fedbn,
  title={Fedbn: Federated learning on non-iid features via local batch normalization},
  author={Li, Xiaoxiao and Jiang, Meirui and Zhang, Xiaofei and Kamp, Michael and Dou, Qi},
  journal={arXiv preprint arXiv:2102.07623},
  year={2021}
}

@inproceedings{yurochkin2019bayesian,
  title={Bayesian nonparametric federated learning of neural networks},
  author={Yurochkin, Mikhail and Agarwal, Mayank and Ghosh, Soumya and Greenewald, Kristjan and Hoang, Nghia and Khazaeni, Yasaman},
  booktitle={International conference on machine learning},
  pages={7252--7261},
  year={2019},
  organization={PMLR}
}

@article{van2008visualizing,
  title={Visualizing data using t-SNE.},
  author={Van der Maaten, Laurens and Hinton, Geoffrey},
  journal={Journal of machine learning research},
  volume={9},
  number={11},
  year={2008}
}

@article{Schneider_Rusak_Eck_Bringmann_Brendel_Bethge_2020,  
title={Improving robustness against common corruptions by covariate shift adaptation}, 
journal={Neural Information Processing Systems,Neural Information Processing Systems}, 
author={Schneider, Steffen and Rusak, Evgenia and Eck, Luisa and Bringmann, Oliver and Brendel, Wieland and Bethge, Matthias}, 
year={2020}, 
month={Jan}, 
language={en-US} 
}

@inproceedings{Wang_Xu_Liu_Li_Thuraisingham_Tang_2022,  
title={Imbalanced Adversarial Training with Reweighting}, 
url={http://dx.doi.org/10.1109/icdm54844.2022.00156}, 
DOI={10.1109/icdm54844.2022.00156}, 
booktitle={2022 IEEE International Conference on Data Mining (ICDM)}, 
author={Wang, Wentao and Xu, Han and Liu, Xiaorui and Li, Yaxin and Thuraisingham, Bhavani and Tang, Jiliang}, 
year={2022}, 
month={Nov}, 
language={en-US} 
}